SMS
Safety Management System ICAO Annex 19
Four components · Twelve elements · The organisational operating system for safety

A Safety Management System is the systematic approach to managing safety that integrates organisational structures, accountabilities, policies and procedures. ICAO standardises it as four components and twelve elements which together form a closed-loop, data-driven management system: safety is planned for, controlled, assured and promoted in the same way an organisation manages quality, finance or operations.

Overview of the framework

ICAO's SMS requirements evolved from accident-driven reform into a single standard in Annex 19 (1st ed. 2013; 2nd ed. 2016), with detailed guidance in Doc 9859 (Safety Management Manual, 4th ed. 2018). State Safety Programmes (SSP) provide the regulatory backbone under which operators, ANSPs, aerodromes, AMOs and design/production organisations implement an SMS scaled to their size, complexity and risk profile.

The framework rests on four components. Safety Policy and Objectives set accountability, leadership commitment, documentation, SAG/SRB governance and emergency-response planning. Safety Risk Management systematically identifies hazards, assesses and mitigates risk to an acceptable level. Safety Assurance measures performance, audits, investigates and manages change. Safety Promotion delivers training and communication, cultivates just culture and ensures that learning flows across the organisation. Each component contains three elements, giving the twelve-element SMS that is the de facto global benchmark.

Plan · Do · Check · Act — the SMS operating loop 1 · SAFETY POLICY & OBJECTIVES • accountability & leadership commitment • SMS documentation & responsibilities • emergency response plan · coordination 2 · SAFETY RISK MANAGEMENT • hazard identification (reactive · proactive · predictive) • risk assessment & mitigation • ALoSP — Acceptable Level of Safety Performance 3 · SAFETY ASSURANCE • performance monitoring (SPIs · SPTs) • management of change • continuous improvement · internal audit 4 · SAFETY PROMOTION • training & education (all levels) • safety communication · lessons learned • just culture · reporting environment
Figure 1. The ICAO SMS framework: four components (policy, risk management, assurance, promotion) arranged as a continuous PDCA loop; each quadrant contains three of the twelve SMS elements.

When to use it

Typical applications

  • Airlines, ANSPs, aerodromes, AMOs, design & production orgs
  • State Safety Programme (SSP) implementation
  • Regulator oversight of operator safety performance
  • Organisational change, mergers, new fleet or route entry
  • Post-incident remediation and regulatory finding closure

Aviation relevance

  • Required by ICAO Annex 19 for all Member States
  • Implemented through EASA Part-ORO/AR, FAA Part 5, TCCA SMS
  • Umbrella for FRMS, FDM, CRM, SeMS, ERP, just-culture policy
  • Forms the basis of IATA IOSA and ICAO USOAP protocols
  • Integrates quality, security and compliance management

Benefits

Systematic & data-driven

Turns safety from a residual concern into a managed line-item with SPIs, SPTs and an ALoSP — tracked, reported and acted upon with the same discipline as cost or on-time performance.

Regulatory alignment

Common four-component model across ICAO States creates a shared language for audits, bilateral recognition and oversight — reducing duplicated effort for multi-national operators.

Proactive & predictive

Built-in hazard-identification processes push organisations beyond reactive investigation into FDM, LOSA, surveys and leading-indicator programmes that surface risk before loss.

Leadership accountability

Designating an Accountable Executive with ultimate responsibility for safety performance closes the classic top-level accountability gap that Reason, Turner and Vaughan all highlight.

Limitations

Paper-compliance risk

SMS documentation can become an end in itself; indicators may be gamed and risk-assessment spreadsheets populated without substantive analysis, a concern raised by Aven, Dekker and others.

Mature-organisation bias

The twelve elements assume resources, data infrastructure and safety culture that smaller operators and developing-State regulators may lack, producing uneven real-world implementation.

Model-of-safety assumptions

Grounded in Reason's defence-in-depth and Safety-I logic; resilience engineering and Safety-II advocates argue SMS under-attends to everyday adjustments and normal performance variability.

Interface management

Operators depend on suppliers, ANSPs, airports and regulators whose SMSs interact imperfectly; seams between organisations remain a recurrent source of unanticipated risk.

In short

SMS is the global operating system for aviation safety: four components, twelve elements and a plan-do-check-act loop that binds policy, risk management, assurance and promotion. Its value depends less on documentation than on whether leadership, data and culture make it live.

References (APA 7)

International Civil Aviation Organization. (2016). Safety management (Annex 19 to the Convention on International Civil Aviation, 2nd ed.). ICAO.

International Civil Aviation Organization. (2018). Safety management manual (Doc 9859, 4th ed.). ICAO.

Federal Aviation Administration. (2015). 14 CFR Part 5 — Safety Management Systems.

Federal Aviation Administration. (2015). Advisory Circular 120-92B: Safety management systems for aviation service providers.

European Union Aviation Safety Agency. (2022). Implementing Rule (EU) 965/2012, Part-ORO.GEN.200 — Management system.

Stolzer, A. J., Halford, C. D., & Goglia, J. J. (2008). Safety management systems in aviation. Ashgate.

Further reading

Maurino, D. E., Reason, J., Johnston, N., & Lee, R. B. (1995). Beyond aviation human factors. Ashgate.

Dekker, S. (2018). The safety anarchist: Relying on human expertise and innovation, reducing bureaucracy and compliance. Routledge.

Hale, A., & Borys, D. (2013). Working to rule, or working safely? Part 1: A state of the art review. Safety Science, 55, 207–221.

Li, Y., & Guldenmund, F. W. (2018). Safety management systems: A broad overview of the literature. Safety Science, 103, 94–123.

International Air Transport Association. (2022). IATA Operational Safety Audit (IOSA) standards manual (14th ed.).